Sunday, May 3, 2026
HomeCyber News

Cyber News

Zoom SDK Update Exploited by NimDoor Malware to Harvest Keychain Credentials on macOS

Security researchers have uncovered a sophisticated macOS malware campaign, dubbed NimDoor, in which North Korea-linked threat actors exploit fake Zoom SDK updates to steal sensitive data from cryptocurrency and Web3 organizations. The malware, which has been active since at least April 2025, represents a...

SquidLoader – A Stealthy Malware That Evades Detection with Advanced Techniques

A sophisticated new malware strain called SquidLoader is actively targeting financial services institutions across Hong Kong, Singapore, and Australia, achieving near-zero detection rates through advanced evasion techniques. Security researchers have identified this threat as particularly dangerous due to its ability to bypass traditional security...

Polyglot Files – A New Technique Hackers Use to Evade Email Filters and Deliver Malware

Security researchers at BI.ZONE Mail Security has uncovered a coordinated phishing campaign targeting Russian healthcare and IT organizations, which leverages advanced evasion tactics and a newly identified backdoor dubbed PhantomRemote. Beginning in late June 2025, the Rainbow Hyena cluster orchestrated the distribution of malicious...

Malicious Konfety Android App on Google Play Exploits ZIP Compression to Mimic Authentic Applications

Security researchers at Zimperium's zLabs have uncovered a sophisticated new variant of the Konfety Android malware that employs advanced ZIP-level manipulation techniques to evade detection and complicate reverse engineering efforts. This latest campaign demonstrates how threat actors are evolving beyond traditional obfuscation methods, targeting...

Internet Shaken by Massive 7.3 Tbps DDoS Assault, Sending 4.8 Billion Packets Every Second

Cybersecurity firm Cloudflare has reported blocking the largest distributed denial-of-service (DDoS) attacks ever recorded during the second quarter of 2025, with one devastating assault reaching 7.3 terabits per second (Tbps) and generating 4.8 billion packets per second. The attack, lasting just 45 seconds, marks...

Cyberattack Strikes – Japanese Firms Targeted Over Ivanti and Fortinet VPN Flaws

Japanese organizations faced a significant escalation in cyber espionage campaigns during fiscal year 2024, with attackers exploiting critical vulnerabilities in Ivanti and FortiGate VPN devices to infiltrate corporate networks. According to a comprehensive report released by Macnica's Security Research Center, North Korean threat actors...